Saturday, March 28th 2009
Mozilla Firefox Updated to 3.0.8
Mozilla today released an important security update to Firefox. With sub-version 3.0.8, The browser has been patched for two critical security vulnerabilities, which are all that make it to this release.
The first vulnerability, titled "Arbitrary code execution via XUL tree element" could allow attackers to compromise a box by using a browser crash to run arbitrary code. The second one titled "XSL Transformation vulnerability" is where attackers get to use browser crashes caused by XSL stylesheets during XSL transformation, to run arbitrary code. For more information, refer to the Security Advisories page for Firefox. Existing Firefox versions will be updated to version 3.0.8 automatically by default. Firefox 3.0.8 can be downloaded from the Mozilla Website.
The first vulnerability, titled "Arbitrary code execution via XUL tree element" could allow attackers to compromise a box by using a browser crash to run arbitrary code. The second one titled "XSL Transformation vulnerability" is where attackers get to use browser crashes caused by XSL stylesheets during XSL transformation, to run arbitrary code. For more information, refer to the Security Advisories page for Firefox. Existing Firefox versions will be updated to version 3.0.8 automatically by default. Firefox 3.0.8 can be downloaded from the Mozilla Website.
33 Comments on Mozilla Firefox Updated to 3.0.8
I'm glad FF gets constant security updates. Confirms it as my browser choice.
:)
I will probably soon switch to Google Chrome though.
Now what is special about google chrome?
Been using FF since just before V1 and Kept IE untill extension IEtab came about , havent looked back. My personal opinion on chrome is that it is faster to load up and download pages, but I can't put my own liking to it as FF.:toast:
I'm currently using v3.1b3 and it doesn't have that neat CTRL + TAB window thing, v3.1b1 had it, if I remember correctly it looks a bit like this except with your tabs:
Im glad that the Firefox team are constantly updating their browser, but it seems to me like they need to scrap the whole thing and start from the ground up all over again.
nobody's bragging about anything -- it's a security update, IE has them everytime they update, too.
so does chrome, and so does opera, and so does safari, and so on, and so on
if you see a browser not constantly telling you about their security updates, it just means that they're leaving the security holes open
Simply put: Everything has a hole somewhere at all times.
It's a GOOD thing that they are finding and patching these exploits as quickly and as often as they do, and it definitely doesn't make it any less secure than any other browser.
Like i said, ' Im glad that the Firefox team are constantly updating their browser, but it seems to me like they need to scrap the whole thing and start from the ground up all over again. ' Incase you guys missed it, im actually happy that they keep finding holes and making repairs and i hope this never stops.
I guess i would appreciate FF more if it felt like i was downloading version 3 and that got updated instead of downloading a whole new browser every .0.1 release.